
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
File: fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json)
Hash identifier: XBbeZJVWO5JeN2D8wM/JvIc3AuIneaJ6R96jcCOWQ7Q=
Subject key identifier: 36:F4:74:7D:E3:C7:5E:C5:8A:75:A0:7E:5E:4A:99:85:F3:47:0B:5A
Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F
Certificate issuer: /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
Certificate serial: 06AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
Manifest number: 06A4
Signing time: Sat 04 Apr 2026 22:12:09 +0000
Manifest this update: Sat 04 Apr 2026 22:12:08 +0000
Manifest next update: Sat 11 Apr 2026 22:12:08 +0000
Files and hashes: 1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: dTAHhozEbiHgbiFwprpBf4sy+WkNC8U6dVjiEy+LIZw=)
2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: lW6QZXgkIKKSa0jLf9ZE4i3WNOuxkEM9pch0Rc7OqqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl
rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1708 (0x6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
Validity
Not Before: Apr 4 22:12:08 2026 GMT
Not After : Apr 11 22:12:08 2026 GMT
Subject: CN=69d18cb9-50ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:bc:b2:0f:52:ef:39:08:47:ab:c3:82:43:
2b:b0:47:2e:7d:f2:2d:bd:fb:fb:fc:e3:35:75:b5:
b7:5d:b1:1f:73:43:6f:ec:7e:dd:f7:73:5c:6d:e3:
ca:57:65:c5:ae:87:a8:f7:4e:84:5e:c5:dc:ad:47:
ea:e5:64:78:f6:30:b3:20:fa:69:0d:ee:d5:06:88:
77:e0:b8:7f:9b:5a:ac:03:85:00:c8:45:a2:96:e7:
d9:2d:58:ac:00:8a:dc:69:e0:f6:bf:da:65:9b:42:
11:de:35:98:48:1b:5f:96:fa:4b:a8:83:dd:e8:bc:
bf:44:b0:b8:a5:d3:fa:db:1f:4b:9b:cb:15:ef:7e:
2c:5b:29:2e:5e:83:94:5e:b9:e6:2c:95:66:6e:7a:
70:ee:32:b7:c7:70:b4:e4:26:0c:f8:1c:09:17:d1:
a6:b4:59:c4:f5:cf:48:2c:83:85:1d:74:c3:61:af:
31:1a:54:fc:bd:62:96:d2:fc:9c:08:e6:03:15:c3:
a2:ec:4a:d8:e1:6f:ef:83:52:9f:cd:2f:96:56:b4:
34:ba:20:0a:5e:97:6c:39:f1:22:55:61:f2:38:a3:
a2:ce:3b:a8:2b:9e:e1:fa:a0:fb:f9:f9:98:8e:9b:
51:ef:ab:6f:86:af:ac:bb:65:61:98:6f:68:55:d7:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:74:7D:E3:C7:5E:C5:8A:75:A0:7E:5E:4A:99:85:F3:47:0B:5A
X509v3 Authority Key Identifier:
keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:8d:68:bd:96:4c:27:98:fa:18:32:4a:f1:dd:0d:79:b8:d6:
6a:53:96:41:94:1c:c1:e8:18:ef:bc:69:b0:bb:8b:05:b0:b1:
0b:10:d2:2f:04:4b:34:69:fa:31:a7:ce:d7:b2:f1:50:f2:38:
a4:0f:bf:e4:20:21:16:d8:90:88:2b:bb:6f:19:b9:ec:ee:5b:
7c:15:12:b4:35:2a:84:1e:c8:f1:e8:18:14:01:5f:f3:29:26:
be:f9:e7:a8:8c:b3:97:dd:0d:df:b7:0e:68:3f:1b:92:e8:10:
4d:ca:60:f8:71:6f:01:f6:82:dd:88:ee:e0:b6:4e:09:8d:2a:
88:96:05:00:86:e7:8f:92:a6:04:2e:28:de:af:75:87:15:a5:
91:75:c9:f3:77:e0:15:82:bb:ef:f9:d8:24:9a:13:dd:ca:23:
06:a7:96:ec:03:03:4b:33:90:40:cb:60:ff:6c:a0:04:28:c1:
04:d4:42:29:4d:67:7e:19:86:5f:de:90:43:da:47:27:af:8e:
42:85:6e:b0:60:d0:63:8c:b7:5c:72:0c:df:8f:cd:8b:d2:45:
9e:54:5b:e6:19:85:99:c0:6a:6a:b2:6a:28:9f:74:1c:e5:a8:
b7:25:ac:33:11:78:f6:70:78:cf:29:64:47:e0:66:3e:ef:e4:
f1:93:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:10 2026 by rpki-client